diff --git a/win32_event_log/assets/configuration/spec.yaml b/win32_event_log/assets/configuration/spec.yaml
index 39aaa32fd49e6..262e79cec845c 100644
--- a/win32_event_log/assets/configuration/spec.yaml
+++ b/win32_event_log/assets/configuration/spec.yaml
@@ -404,6 +404,8 @@ files:
         type: array
         items:
           type: string
+        example: 
+          - '1101'
     - name: message_filters
       description: |
         The `message_filters` filter instructs the check to only capture
diff --git a/win32_event_log/datadog_checks/win32_event_log/data/conf.yaml.example b/win32_event_log/datadog_checks/win32_event_log/data/conf.yaml.example
index b005a9f50466a..e2afc9dbebe67 100644
--- a/win32_event_log/datadog_checks/win32_event_log/data/conf.yaml.example
+++ b/win32_event_log/datadog_checks/win32_event_log/data/conf.yaml.example
@@ -329,7 +329,8 @@ instances:
     ##
     ## Note: This is only used when `legacy_mode` is set to `true`.
     #
-    # event_id: []
+    # event_id:
+    #   - '1101'
 
     ## @param message_filters - list of strings - optional
     ## The `message_filters` filter instructs the check to only capture